Loading...

Knowledge Center


Microsoft SMS Agent Host service (ccmexec.exe) triggers the Access Protection rule: Prevent termination of McAfee processes
Technical Articles ID:  KB71970
Last Modified:  08/02/2012
Rated:


Environment

McAfee VirusScan Enterprise 8.x

Microsoft SMS Agent Host service (ccmexec.exe)

Problem

The Microsoft SMS Agent Host service (ccmexec.exe) triggers the Access Protection rule: Prevent termination of McAfee processes.

Cause

  • VirusScan Enterprise 8.8
    Unlike earlier versions of VirusScan Enterprise (VSE), the Access Protection rule Prevent termination of McAfee processes only triggers if the process is explicitly seeking the right to terminate our process.
     
  • VirusScan Enterprise 8.7i
    The Access Protection rule Prevent termination of McAfee processes is considered triggered if the process seeks to acquire the privilege to terminate a McAfee process. It does not actually have to try and terminate the process. The rule is less finely tuned than in VSE 8.8.  

Solution

McAfee has confirmed that SCCM.exe explicitly seeks to acquire the "terminate process" privilege. The Access Protection rule is behaving as expected.

To trust the program, exclude the ccmexec.exe process from the rule. This process does not terminate McAfee programs even though it does seek the "terminate process" privilege.
  1. Click Start, Programs, McAfee, VirusScan Console.
  2. Double-click Access Protection, and select Common Standard Protection.
  3. Double-click Prevent termination of McAfee processes.
  4. Under Processes to exclude, navigate to the end of the list.

    NOTE: You might have to move a long way down with your cursor. 
     
  5. Type  ccmexec.exe then click OK.

    IMPORTANT:
    • Ensure that there are no spaces before or after the commas separating process names.
    • Use a (partial) path name if other processes with the same name exist. Also see KB66909 - VirusScan Enterprise exclusions (Master Article).
       
  6. Click OK until the Access Protection Properties window is closed, then exit VirusScan Console.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.
United States - English
© 2003-2013 McAfee, Inc.